Privacy Policy

1. Data Controller

BooksTuner operates this service. For privacy-related inquiries, contact: bookstuner.opposing446@passinbox.com

2. What Data We Collect and Why

Uploaded files

Files you upload are stored temporarily on our server solely to perform the requested conversion or metadata editing. They are automatically deleted when your session expires (within 15 minutes).

Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).

IP address

Your IP address is used exclusively for rate limiting — to prevent abuse of the service. It is not stored in any persistent log or linked to your identity.

Legal basis: legitimate interest in maintaining service availability (Art. 6(1)(f) GDPR).

Email address

If you choose to send a converted file to an email address (e.g., your Kindle address), that address is used solely to deliver the file. It is not stored after the message is dispatched and is not used for any other purpose.

Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR).

3. Data Retention

• Uploaded files and session data — deleted automatically within 15 minutes of upload.
• Email addresses — not stored; discarded immediately after delivery.
• IP addresses — held in memory (Redis) for rate-limiting purposes with a 24-hour rolling window, then discarded automatically.

4. Cookies and Tracking

BooksTuner uses Umami, a privacy-friendly analytics tool hosted on our own server. It collects anonymous usage statistics (pages visited, country, browser, device type) without using cookies and without storing any personally identifiable information. No data is shared with third parties.

Theme and language preferences are stored locally in your browser (localStorage) and never transmitted to the server.

5. Third-Party Services

When you search for a cover image, your search query is sent to the following services:

• Google Books API — operated by Google LLC. Queries are subject to Google's Privacy Policy.
• Open Library (Internet Archive) — operated by the Internet Archive, a US non-profit. Queries are subject to their privacy policy.

If you send a file to a Kindle address, the email passes through our SMTP provider to reach Amazon's servers. No content is retained by the SMTP provider beyond standard delivery logs.

6. Data Transfers

We do not sell or share your personal data with third parties for marketing or profiling purposes. Data may be processed outside the EU/EEA only when using third-party services listed above, each of which provides adequate safeguards under GDPR (Standard Contractual Clauses or equivalent).

7. Your Rights

Under the GDPR, you have the right to:

• Access — request a copy of personal data we hold about you
• Erasure — request deletion of your data (files are deleted automatically within 15 minutes; no other personal data is retained)
• Restriction — request that we restrict processing of your data
• Objection — object to processing based on legitimate interest
• Portability — receive your data in a structured, machine-readable format
• Lodge a complaint — with your local data protection authority. In the EU, you can find your authority at edpb.europa.eu.

Given the nature of the service (no accounts, no persistent personal data), most requests can be satisfied by the fact that data is deleted automatically within 15 minutes. To exercise any right, contact: bookstuner.opposing446@passinbox.com

8. Changes to This Policy

We may update this Privacy Policy at any time. Continued use of the service after changes are posted constitutes acceptance of the revised Policy.

9. Contact

For any privacy-related questions: bookstuner.opposing446@passinbox.com